Home▸Cybersecurity▸Kubernetes Cluster Runtime Security

Kubernetes Cluster Runtime Security

Interactive 3D Kubernetes cluster: simulate a compromised pod attempting lateral movement, a privileged RBAC action and a container escape, and toggle Network Policies, RBAC and Pod Security to see which real defense stops each attack step.

Cybersecurity3DModerate60 FPS

Details

CategoryCybersecurity

RenderingThree.js · WebGL

DifficultyModerate

Target FPS60

ControlsThree toggles enable/disable RBAC, Network Policy and Pod Security independently; Simulate pod compromise drives a compromised pod through three attack steps (lateral movement to the database pod, a privileged API action, a container escape to the host node), each flashing blocked or succeeded against the active defenses with a live status readout; Reset returns the pod to its starting state.

Three.jsKubernetesRBACNetwork PolicyPod Securitycontainer escapecybersecurity

Related simulations

Authorization Security: RBAC vs ABAC Access ControlWatch role-based (RBAC) and attribute-based (ABAC) access-control policies decide requests…

Container Escape via Shared KernelSix containers share one host's Linux kernel: click a container to compromise it, then…

Adversarial ML Attacks: Evasion & Poisoning3D nearest-centroid classifier over a feature-space cube: run an evasion attack that… ⊞ All 217 in Cybersecurity →

This simulator drops a compromised pod into a running Kubernetes cluster made of namespaces, pods and a host node, and walks it through three real attack steps: lateral movement to a database pod, a privileged API call, and a container escape onto the host. Toggle RBAC, Network Policies and Pod Security independently to see exactly which real Kubernetes defense mechanism stops each step — and what a missing one lets an attacker do next.

⚙ Under the hood

3D Kubernetes cluster with app and data namespaces: simulate a compromised pod attempting lateral movement to a database pod, a privileged Kubernetes API call, and a container escape to the host node. Toggle Network Policy, RBAC and Pod Security independently to see which real defense mechanism blocks each attack step.

Three.jsKubernetesRBACNetwork PolicyPod Securitycontainer escapecybersecurity

3D · Three.js / WebGL renderer · 60 FPS target · runs fully client-side, no install